Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2NZV_fAJzljer7t6CrRFKqfIyUQ.roa
File: 2NZV_fAJzljer7t6CrRFKqfIyUQ.roa (raw, json)
Hash identifier: e2p+fcxeRQPqibbgA+kljdZNFlGVReZUIGO+fiAaISc=
Subject key identifier: D8:D6:55:FD:F0:09:CE:58:DE:AF:BB:7A:0A:B4:45:2A:A7:C8:C9:44
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0183
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2NZV_fAJzljer7t6CrRFKqfIyUQ.roa
Signing time: Fri 07 Jul 2023 04:12:31 +0000
ROA not before: Fri 07 Jul 2023 04:12:31 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 61.44.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 31 May 2024 01:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:12:31 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=D8D655FDF009CE58DEAFBB7A0AB4452AA7C8C944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:24:b9:be:1e:03:77:3a:da:bc:e4:6f:59:
85:cd:e7:8a:83:6e:eb:94:a1:62:b8:1f:6b:b2:4d:
8f:71:c5:98:dc:b5:65:cf:d3:9b:55:a9:be:15:ad:
46:91:d5:3d:88:3d:6e:a3:a9:6d:6d:e6:10:4b:99:
6c:a6:44:ae:93:ea:b9:4b:8c:12:fa:b9:eb:9f:a6:
22:39:41:96:e8:ec:c9:9e:87:5b:4b:53:c6:e7:4a:
3c:ff:f3:34:99:48:8c:2b:bd:2d:49:48:00:9e:77:
ea:b4:01:71:c5:09:3c:d9:24:5a:42:3e:ee:31:2c:
af:a8:64:22:b4:fa:fd:83:00:7d:80:c4:43:6c:4a:
b5:f8:ae:5b:43:6e:d8:ef:84:36:e8:9a:f5:2c:24:
4c:53:ec:21:f0:6d:58:01:82:c5:a6:a7:04:19:20:
b4:40:b7:8c:ae:4f:c7:d3:03:87:fa:01:b6:f3:eb:
42:6f:fe:70:03:a0:89:24:ce:68:91:cf:4e:eb:9c:
e3:b8:59:ed:f4:df:22:69:6b:b4:0b:3f:a6:09:bd:
6f:fa:2d:04:9c:63:57:d6:78:64:0e:8a:f3:ae:cb:
ed:eb:93:48:41:d4:df:98:e4:3c:79:0d:84:83:9f:
bb:ad:08:c1:53:f3:cd:f8:65:0d:d6:c6:75:3d:cf:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:55:FD:F0:09:CE:58:DE:AF:BB:7A:0A:B4:45:2A:A7:C8:C9:44
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2NZV_fAJzljer7t6CrRFKqfIyUQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.44.208.0/20
Signature Algorithm: sha256WithRSAEncryption
84:36:33:b3:39:83:ec:19:1c:f4:54:12:a0:aa:88:06:ae:d0:
9a:90:9d:bb:6e:36:17:1a:3f:6f:93:37:f0:f4:4b:57:80:d1:
2c:c5:f1:f5:62:e9:bc:c5:4a:41:6c:8b:19:18:1a:81:7c:df:
5c:de:fb:ff:6b:75:68:52:7e:45:f9:f8:4b:a6:a1:8d:37:d9:
6f:e6:57:68:91:c0:77:af:c7:ba:23:dc:64:99:d4:98:e6:dd:
10:42:d7:ed:aa:8c:b1:47:2e:5f:8a:13:0e:27:bf:ca:eb:c9:
4b:3a:9e:87:92:af:21:70:38:7d:60:30:2b:12:5e:13:15:2f:
cb:0e:00:8c:55:45:83:d1:05:e4:80:94:02:87:06:c8:3f:0a:
2f:34:77:b6:bf:70:71:2e:76:14:ca:8b:d5:e1:b3:a5:35:84:
cf:99:84:c0:08:0c:f5:93:98:19:1b:2e:c9:f9:07:65:1a:67:
e2:20:4b:ad:7e:1e:2d:51:a9:62:44:45:f9:c6:93:ab:30:85:
5c:c4:8e:42:db:67:90:b9:2d:46:0c:31:a8:20:1e:1f:34:b8:
89:e4:2d:56:a9:9e:91:90:6e:cd:9a:18:2d:e5:ab:23:b8:fc:
54:8c:9b:c1:04:9c:16:5e:2b:3a:0a:92:a8:30:0d:db:c6:6a:
6a:77:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org